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REMARKS 

These remarks are set forth in response to the Office Action. As this amendment has 
been timely filed within the three-month statutory period, neither an extension of time nor a fee 
is required. Presently, claims 1 through 13 are pending in the Patent Application. Claims 1, 6, 
and 9 are independent claims. In the Office Action, claims 1 through 13 have been rejected 
under 35 U.S.C. § 102(b) as being anticipated by U.S. Patent No. 6,081,900 to Subramaniam et 
al. (Subramaniam). In response, the Applicants respectfully traverse the rejections on the art as 
Subramaniam teaches tunneling non-hypertext transfer protocol (HTTP) data through a reverse 
proxy within HTTP messages while the claims of the Patent Application explicitly require that 
non-HTTP data is passed through the reverse proxy without encapsulating the non-HTTP data 
within HTTP messages . 

Prior to a discussion of the rejections on the art, a brief review of the Applicant's 
invention will be helpful. The Applicant has invented is a method, system and apparatus for 
tunneling non-HTTP streams through a reverse proxy. In the Applicants' invention, a socket 
connection can be established with a reverse proxy. Based upon the establishment of the socket 
connection, the socket can be passed to a non-HTTP data stream handler. The non-HTTP data 
stream handler can maintain the open socket connection and can write non-HTTP data streams 
over the socket without encapsulating the non-HTTP data within an HTTP message . The non- 
HTTP data stream handler can continue to exchange the non-HTTP data over the open socket 
until finished. Subsequently, the non-HTTP data stream handler can close the socket. 
Significantly, and unlike prior art HTTP tunneling implementations , in the Applicants' invention, 
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the non-HTTP data can be exchanged over the secured connection without encapsulating the 
non-HTTP data within HTTP messages . 

Turning now to the rejections on the art, Subramaniam relates to securely accessing a 
network from an external client. Requests for access to confidential data are redirected from a 
target server to a border server, after which a secure sockets layer (SSL) connection between the 
border server and the external client carries user authentication information. After the user is 
authenticated to the network, requests may be redirected back to the original target server. Web 
pages sent from the target server to the external client are scanned for non-secure uniform 
resource locators (URLs) such as those containing the prefix "http://" and those URLs are 
modified to make them secure. In one embodiment taught within Subramaniam, tunneling is 
used for the redirection. 

Figure 1 of Subramaniam is representative of the Subramaniam system. As shown in 
Figure 1, secure data (shown as elements 134 and 138) is passed to a target server (shown as 
element 104) through a border server (shown as element 106). The exchange of the secure data 
from the border server to the target server is performed by using tunneling and is shown as 
"Secure Data in Tunnel 138" within Figure 1. Figure 2 of Subramaniam clarifies the operation 
of the system of Figure 1 by stating "transmit secure data from target server through border 
server tunnel to user/client" in the method step labeled step 136 in Figure 2. 

Importantly, as discussed in column 3, lines 40 through 50 of Subramaniam, column 3 
line 66 through column 4, line 19 of Subramaniam, column 7, lines 1 through 35 of 
Subramaniam, and column 8 lines 13 through 23 of Subramaniam, the border manager of the 
Subramaniam system can re-write the URL of an incoming request associated with secure data 
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from an "http" header to a "https" header in order to invoke "HTTPS" treatment. As it is 
understood in the art, HTTPS is HTTP over an SSL connection. The messages exchanged in 
HTTPS are HTTP messages. The HTTP messages, however, are exchanged using SSL 
connectivity. 

Column 7, lines 24 through 35 of Subramaniam discuss the nature of HTTPS and 

reference United States Patent No. 5,825,890 to Elgamal et al. (Elgamal). With specific 

reference to Elgamal, it is stated with particularity: 

[T]he HTTPS header in the URL indicates that the server is a secure HTTP server. The "S" suffix 
in the header syntax indicates that the connection is to be a secure connection, and that the 
application should invoke the SSL library. The absence of an "S" from the header syntax, that is a 
normal HTTP header, would indicate that the connection need not be secure, and that the SSL 
library need not be invoked. Thus, the HTTPS header indicates to the application that the SSL 
library is to be called to provide a secure HTTP transfer. Note that the protocol known as HTTP 
itself is not altered or modified. Rather, information transferred between client and server 
applications is encrypted/decrypted in transit using the client side and server side SSL libraries. In 
effect, the SSL libraries provide an additional security layer between application and transport 
layers. See Elgamal column 14, line 55 through column 15. line 3 (emphasis added). 

The emphasized portion of the Elgamal citation can be found on column 14, lines 64 through 65. 

Considering the teachings of Subramaniam and Elgamal, in the claims of the Applicants' 
Patent Application, it is explicitly required that "non-HTTP data" is written to a reverse proxy 
"without encapsulating said non-HTTP data within HTTP messages". Clearly, the "without 
encapsulating said non-HTTP data within HTTP messages" is not shown by Subramaniam 
because Subramaniam requires the use of HTTP messages inherent to HTTP. Thus, the 
Applicants respectfully believe that Subramaniam cannot be held to teach each and every recited 
limitation of the claims of the Applicants' Patent Application. 

For these reasons, the Applicant respectfully requests the withdrawal of the rejections 
under 35 U.S.C. § 102(b). This entire application is now believed to be in condition for 
allowance and such action is respectfully requested. The Applicants request that the Examiner 
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call the undersigned if clarification is needed on any matter within this Amendment, or if the 
Examiner believes a telephone interview would expedite the prosecution of the subject 
application to completion. 
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